CVE Explorer.
Every published CVE, ranked the way you should actually patch: KEV first, then anything with a public exploit or an EPSS above ten per cent, then down by CVSS.
408,348 CVEs
1,745 on KEV
17,306 EPSS ≥ 10%
25,091 with exploits
synced 2026-10-15
152,687 results
| CVE | Summary | Priority | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2007-1548 EXP | SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain charact… | Patch early | 7.5 high | 1.8% | 2007-03-20 |
| CVE-2008-5649 EXP | SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the… | Patch early | 10.0 high | 1.8% | 2008-12-17 |
| CVE-2024-21111 EXP | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.1… | Patch early | 7.8 high | 1.8% | 2024-04-16 |
| CVE-2005-4034 EXP | Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2… | Patch early | 7.5 high | 1.8% | 2005-12-06 |
| CVE-2024-25004 EXP | KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and in… | Patch early | 7.8 high | 1.8% | 2024-02-09 |
| CVE-2007-3562 EXP | SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parame… | Patch early | 7.5 high | 1.8% | 2007-07-04 |
| CVE-2007-3609 EXP | Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitrary SQL commands via the id para… | Patch early | 7.5 high | 1.8% | 2007-07-06 |
| CVE-2017-9413 EXP | Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authenticatio… | Patch early | 8.8 high | 1.8% | 2017-07-25 |
| CVE-2006-4010 EXP | SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page… | Patch early | 7.5 high | 1.8% | 2006-08-07 |
| CVE-2003-1216 EXP | SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the sea… | Patch early | 7.5 high | 1.8% | 2003-11-27 |
| CVE-2005-1263 EXP | The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to e… | Patch early | 7.2 high | 1.8% | 2005-05-11 |
| CVE-2008-3369 EXP | SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the catego… | Patch early | 7.5 high | 1.8% | 2008-07-30 |
| CVE-2008-3845 EXP | Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands v… | Patch early | 7.5 high | 1.8% | 2008-08-27 |
| CVE-2018-2892 EXP | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service). Supported versions that are af… | Patch early | 7.8 high | 1.8% | 2018-07-18 |
| CVE-2005-4139 EXP | Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parame… | Patch early | 7.5 high | 1.8% | 2005-12-09 |
| CVE-2004-1225 EXP | SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via th… | Patch early | 10.0 high | 1.8% | 2005-01-10 |
| CVE-2007-2675 EXP | SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category p… | Patch early | 7.5 high | 1.8% | 2007-05-14 |
| CVE-2016-4808 EXP | Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user t… | Patch early | 8.8 high | 1.8% | 2017-01-11 |
| CVE-2012-5698 EXP | BabyGekko before 1.2.4 has SQL injection. | Patch early | 8.8 high | 1.8% | 2020-01-23 |
| CVE-2007-3889 EXP | Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the curren… | Patch early | 7.5 high | 1.8% | 2007-07-18 |
| CVE-2008-6802 EXP | Multiple SQL injection vulnerabilities in index.php in phPhotoGallery 0.92 allow remote attackers to execute arbitrary SQL commands via the (1) Userna… | Patch early | 7.5 high | 1.8% | 2009-05-07 |
| CVE-2005-1134 EXP | SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id o… | Patch early | 7.5 high | 1.8% | 2005-04-13 |
| CVE-2005-3201 EXP | SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows rem… | Patch early | 7.5 high | 1.8% | 2005-10-14 |
| CVE-2005-2954 EXP | SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the emai… | Patch early | 7.5 high | 1.7% | 2005-09-16 |
| CVE-2005-3545 EXP | SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL comman… | Patch early | 7.5 high | 1.7% | 2005-11-16 |
| CVE-2006-0721 EXP | SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter… | Patch early | 7.5 high | 1.7% | 2006-02-16 |
| CVE-2006-1754 EXP | SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the S… | Patch early | 7.5 high | 1.7% | 2006-04-13 |
| CVE-2006-2065 EXP | SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid co… | Patch early | 7.5 high | 1.7% | 2006-04-27 |
| CVE-2004-2143 EXP | SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitra… | Patch early | 7.5 high | 1.7% | 2004-12-31 |
| CVE-2004-1914 EXP | SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via t… | Patch early | 7.5 high | 1.7% | 2004-12-31 |
How to read it
Patch the KEV entries first — those are being exploited in the wild right now — then anything with a public exploit or an EPSS above ten per cent, then work down by CVSS in your normal cycle. That order, not raw CVSS, is what keeps you ahead of what is actually being used against people. The data is drawn daily from NVD, FIRST EPSS, CISA KEV and Exploit-DB.
Watch your own stack → and get told only when something that matters to it moves.
→ all tools · exposure · dns · email · headers · tls · ct · cookies · reputation · security.txt